SALESmanago vulnerabilities

🔔 Create alert RSS

Published CVEs affecting SALESmanago products: 2 record(s), with severity, exploitation and fixes.

SALESmanago & Leadoo 2

Exploited only (KEV) →

CVE-2026-54822 High · 8.5 CWE-89 Jun 25, 2026

WordPress SALESmanago & Leadoo plugin <= 3.11.2 - SQL Injection vulnerability

Subscriber SQL Injection in SALESmanago & Leadoo <= 3.11.2 versions.

CVE-2025-68571 Medium · 5.3 CWE-862 Dec 24, 2025

WordPress SALESmanago plugin <= 3.9.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in SALESmanago SALESmanago & Leadoo salesmanago allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SALESmanago & Leadoo: from n/a through <= 3.9.0.